this post was submitted on 19 Jul 2024
17 points (94.7% liked)
Android Development
477 readers
8 users here now
Welcome to the programming.dev Android development community!
The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I don't consider a personal dev's identity documents and signing keys to have much bearing on "safety".
You're not a developer, you're a company, even if you're doing business as an individual.
The signing key requirement has pros and cons. Cons being that Google can now impersonate developers and inject code at will. This seems somewhat irrelevant in face of the control they already exert through Google Play Services, but it's obviously bad nonetheless.
Pros being that Google can now keep the signing key secure behind a Google sign-in instead of relying on individual developers to maintain good opsec.
I don't disagree but for me personally it's too much, so I have decided not to publish on the play store anymore.